Evidence

Coming soon

Alternative to Drata

Controls, proof on a schedule, gaps and expiring auditor folders.

Evidence is an audit-evidence desk for one business. You write your controls, keep proof on a schedule, see honest gaps, share an expiring folder with an auditor, and take your archive with you. A file fingerprint proves the bytes are unchanged; it does not certify your business or prove a control worked.

What it does

Write controls in plain words with the proof you need and how often
Upload proof files and keep a receipt and fingerprint for each, with replaced files kept
See for any period whether each requirement is covered, due soon, overdue, missing, replaced-only or unreadable
Share selected controls and dates with an auditor through an expiring link, and see who opened what
Close an auditor folder to stop future access
Let an assistant propose an auditor folder for you to approve
Import from a Drata audit-evidence ZIP with a preview, journal and undo
Export the whole archive and restore it into an empty installation

What it promises

PROOF-001Each upload issues a receipt from the stored bytes, a replacement keeps the old receipt and file, and nothing already recorded is altered.
GAP-001Each requirement shows one honest state for the chosen period; there is no single green score.
REVIEW-001An auditor folder covers only the controls and dates you select, uses a one-time link that expires, is checked on every request, and keeps an owner-only access history.
REVIEW-001Auditors cannot sign in, change anything or see who uploaded files or other folders.
CUSTODY-001The archive holds your records and proof files with their fingerprints, lists any file that could not be read, and restores only into an empty installation; restored folders stay closed.
IMPORT-001A Drata import is reviewed before it is admitted, journalled, and undo removes the links while keeping the original files and receipts; imported material never counts as current proof.
AGENT-001An assistant can only inspect gaps and propose folders; the owner approves the exact proposal and the decision is recorded.
Evidence does not certify a business, replace an auditor, supply policies or legal advice, or run automatic collectors.

Read the full contract

Move in from

Drata audit-evidence ZIP with HTML manifest

Run it yourself

Install the command once, then clone a product and start it.

Terminal

$ npx -y @runeditrun/rer cli install
$ git clone https://github.com/just-every/run-evidence
$ cd run-evidence && rer dev

No npm? curl -fsSL https://runeditrun.com/install.sh | sh installs the same command.

Runs on: your own Cloudflare account (or on your computer to try it)
Licence: MIT, free